Sunday, March 11, 2012

Active Directory / Groups + MS SQL (yikes)

When configuring ms sql to permit authentication from users over a
domain. Is it possible to poll from system tables like sysusers /
sysmembers / sysgroups / sysprocesses / etc what active directory
group's a specific user is a member of once they are authenticated into
a ms sql server? I've been searching the newsgroups looking for a
solution but so far I'm 'unable' to find any solutions. Any input would
be greatly appreciated.
Thanks,
:)The list of groups that a user is a member of is not stored anywhere on the
SQL server. You could is the IS_MEMBER() function to determine if a user is
a
member of a specified group, but not list the groups the user is a member of
.
Although I know nothing about it, you could use the new CLR features of SQL
2005 along with ADSI to get the listing of groups a user is a member of
inside a function. In SQL 2000, you could use LDAP ADSI to get some
attributes out of AD into a rowset, but not group memberships; that attribut
e
is multi-valued.
"jebuskrust@.gmail.com" wrote:

> When configuring ms sql to permit authentication from users over a
> domain. Is it possible to poll from system tables like sysusers /
> sysmembers / sysgroups / sysprocesses / etc what active directory
> group's a specific user is a member of once they are authenticated into
> a ms sql server? I've been searching the newsgroups looking for a
> solution but so far I'm 'unable' to find any solutions. Any input would
> be greatly appreciated.
> Thanks,
> :)
>

No comments:

Post a Comment